{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.1"}],"component":"mc-kill-port","cve_ids":["CVE-2022-25973"],"ecosystem":"npm","epss":0.00488,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2cg4-7q4x-7rr2","id":"tcs_01M5KESSWBW3GDF4M14JWD3KFT","modified_at":"2023-11-08T04:08:53.003883Z","published_at":"2022-08-11T00:00:21Z","references":["https://osv.dev/vulnerability/GHSA-2cg4-7q4x-7rr2","https://nvd.nist.gov/vuln/detail/CVE-2022-25973","https://security.snyk.io/vuln/SNYK-JS-MCKILLPORT-2419070","https://www.npmjs.com/package/mc-kill-port"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-2cg4-7q4x-7rr2","url":"https://osv.dev/vulnerability/GHSA-2cg4-7q4x-7rr2"}],"summary":"mc-kill-port vulnerable to Arbitrary Command Execution via kill function"}